Loading story…
Gartner warned that misconfigured AI embedded in cyber-physical systems could trigger a shutdown of national critical infrastructure in a G20 country by 2028, driven by AI failures rather than malicious hacking. The scenario focuses on AI-enabled operational environments where automated decision-making and control can propagate errors rapidly from digital systems into physical processes.
The risk is framed around engineering and configuration mistakes—such as flawed update scripts, incorrect parameters (e.g., a misplaced decimal), or misinterpreted sensor data—causing unsafe actions, equipment damage, cascading outages, and supply-chain destabilization. Gartner highlighted that modern critical environments (including operational technology/ICS, industrial automation, IIoT, robots, drones, and AI-assisted power grid balancing) are increasingly reliant on AI, making resilience, validation, and change-control for AI-driven control logic a critical safety and security concern.
See the actors and campaigns active against you right now.
1 event from the most recent confirmed update back to the earliest known activity.
Gartner warned that a misconfigured AI embedded in cyber-physical systems could cause a national critical infrastructure shutdown in a G20 country by 2028. The analysis highlighted cascading physical impacts in sectors such as power, transportation, healthcare, and finance, driven by configuration errors and weak governance rather than malicious hacking.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Gartner analyst **Wam Voster** warned that **agentic AI** in **operational technology (OT)** environments could create new cyber-physical and safety risks as autonomous systems begin making production decisions in industrial settings. He said factories may increasingly rely on AI agents to adjust variables such as temperature, timing, and equipment settings based on external and process data, raising the possibility that configuration errors or unsafe automated decisions could move beyond downtime and production loss into physical harm. Voster highlighted that a misconfigured AI agent could make dangerously incorrect adjustments—for example, changing a process by **200 degrees instead of 2 degrees**—with potential consequences including equipment destruction, explosions, or injury and death. He also emphasized that human error remains a major cause of cyber-physical incidents and discussed the limits of applying full **zero trust** concepts in industrial environments. A separate ZDNET workplace advice article about employee anxiety over AI agents is not about OT security or this specific risk discussion and should be excluded.
Jun 29, 2026
Organizations are facing a rapidly evolving threat landscape as artificial intelligence accelerates the capabilities of cyber attackers, particularly against critical infrastructure and enterprise environments. Security experts highlight the increasing use of AI by adversaries to identify vulnerabilities in software and APIs, requiring defenders to adopt smarter, adaptive security measures. Industry reports emphasize the importance of patching, real-time anomaly detection, and the deployment of AI security platforms to protect both third-party and custom-built AI applications. Gartner predicts that by 2028, over half of enterprises will use AI security platforms, and preemptive cybersecurity solutions will become a dominant part of security spending as organizations shift from reactive to proactive defense. Geopolitical instability and complex digital supply chains are further amplifying cyber risks, with many organizations underprepared for cascading impacts such as state-sponsored attacks and supply chain vulnerabilities. While risk management strategies are improving, visibility beyond direct partners remains limited, leaving blind spots that attackers can exploit. The convergence of AI-driven threats, geopolitical volatility, and the need for advanced security technologies underscores the urgency for organizations to modernize their cybersecurity approaches to safeguard critical assets and maintain digital trust.
Jun 29, 2026
The U.S. **Cybersecurity and Infrastructure Security Agency (CISA)** issued new guidance warning that expanding use of **AI—particularly generative AI tools—in operational technology (OT)** can increase risk across critical infrastructure environments such as power, water, pipelines, and industrial processes. The guidance emphasizes that OT systems historically lag in cybersecurity maturity and are increasingly exposed as they become more internet-connected and integrated with **Industrial IoT (IIoT)** sensors and remote operations; it also flags organizational challenges such as OT security skill gaps and the likelihood of “shadow AI” use even where tools are formally restricted. Separate industry commentary reinforced that AI adoption in OT is accelerating and will increasingly move from monitoring to **recommendation and automated action**, raising the stakes because failures can have physical consequences and cascading operational disruption. Additional perspectives highlighted broader **cyber-physical resilience** issues—arguing that enterprises often fail to integrate physical and cyber security programs effectively—and pointed to basic infrastructure dependencies (e.g., **power redundancy and misconfigured backup power**) as underappreciated factors that can turn outages into major security and safety incidents in converged IT/OT environments.
Jun 29, 2026